Configuring SSO in Microsoft Azure Active Directory

Enterprise Plans only

1. Log into Azure administrator panel and go to Active Directory.

2. In the menu click Enterprise Applications.

   

3. Click New Application.

   

4. Type Sauce Labs in the search box and choose the app Sauce Labs.

   

5. Leave the default name or rename it and click Create.

   

6. Set up SAML Single Sign-On either by clicking Single sign-on in the menu on the left or by clicking the tile Set up single sign on.

   

7. Click the SAML tile.

   

8. Save the default configuration by clicking Yes.

   

9. In the Attributes & Claims section click Edit.

   

10. Edit the value of NameID by clicking on it.

    

11. Make sure that the source value of this claim is a valid email address (for example user.mail) and not a user identifier. Sauce Labs Service Provider requires valid email addresses during SAML SSO authentication. If you changed the source attribute, save the changes.

    

12. Next, assign users to this application:

    1. Go to User and groups in the main menu of the application.

       

    2. Click Add user/group.

       

    3. Choose which groups and users should have access to Sauce Labs via this SAML application.

       

13. Go back to the Single sign-on tab.

    

14. In the SAML Certificates section for Federation Metadata XML, click Download.

    

15. Use the metadata file from the previous step and set up the SSO integration at Sauce Labs in Organization Management Panel.

16. Test the integration using the IdP-initiated and the SP-initiated login.

    1. The IdP-initiated flow can be tested from the Single sign-on tab.

       

    2. Next, in the last section Test single sign-on with Sauce Labs click Test.

       

    3. Click Test sign in.